Thử thêm cái coi lào
Feb
20
Authorized awstats access
hrockvn , 23:19 , Networking , Nhận xét: (0) , Trích dẫn: (0) , Đọc: (983) , Via Tự viết
Lớn | Vừa | Nhỏ
Lớn | Vừa | Nhỏ
A simple (almost secure) solution:
awstats edit service -> connection info:
Open stats page
************** Statistics.asp ****************
rem line 1:
rem find:
AddFormRowLight("View Details")
StatsDetails = oStats.GetStatsDetails(UserName, Password, CLng(rsStats("StatsInstalId")))
StatsDetails = Replace(StatsDetails, "[domainname]", DomainName)
StatsDetails = Replace(StatsDetails, "[domainid]", DomainID)
'inserted Conviator.com
Dim md5keyhex
md5keyhex = calcMD5("MYsecretKEY" & DomainName)
StatsDetails = Replace(StatsDetails, "[md5key]", md5keyhex)
'end insert
**************** awstats.pl ******************
#1)
use MD5;
use vars qw/ $KEY $value $name @CONpairs $CONpair $CHECKKEY $ENV /;
$KEY = "MYsecretKEY";
@CONpairs = split(/&/, $ENV{'QUERY_STRING'});
foreach $CONpair (@CONpairs) {
($name, $value) = split(/=/, $CONpair);
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$CONFORM{$name} = $value;
}
$CHECKKEY = MD5->hexhash($KEY.$CONFORM{config});
# 2) find:
&html_head;
# inserted Conviator.com
if ($CHECKKEY eq $CONFORM{key}) {
} else {
print "Unauthrized access attemted
";
}
# end insert
# Security check
******************** end
awstats edit service -> connection info:
Open stats page
************** Statistics.asp ****************
rem line 1:
rem find:
AddFormRowLight("View Details")
StatsDetails = oStats.GetStatsDetails(UserName, Password, CLng(rsStats("StatsInstalId")))
StatsDetails = Replace(StatsDetails, "[domainname]", DomainName)
StatsDetails = Replace(StatsDetails, "[domainid]", DomainID)
'inserted Conviator.com
Dim md5keyhex
md5keyhex = calcMD5("MYsecretKEY" & DomainName)
StatsDetails = Replace(StatsDetails, "[md5key]", md5keyhex)
'end insert
**************** awstats.pl ******************
#1)
use MD5;
use vars qw/ $KEY $value $name @CONpairs $CONpair $CHECKKEY $ENV /;
$KEY = "MYsecretKEY";
@CONpairs = split(/&/, $ENV{'QUERY_STRING'});
foreach $CONpair (@CONpairs) {
($name, $value) = split(/=/, $CONpair);
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$CONFORM{$name} = $value;
}
$CHECKKEY = MD5->hexhash($KEY.$CONFORM{config});
# 2) find:
&html_head;
# inserted Conviator.com
if ($CHECKKEY eq $CONFORM{key}) {
} else {
print "Unauthrized access attemted
";
}
# end insert
# Security check
******************** end
Unable to make the session state request to the session state server
DirectSpace
